Let community help person suspend user accounts

[Henning Eggers]

When the community help person requests an account to be suspended by a LOSA (e.g. because it is a pure spam account), the LOSA uses IPerson:+reviewaccount to set the account to deactivated. This is really something the CHR person could do but there is sensitive information on that page and the password can be changed, too.

It should be made accessible to the ~registry team (of which the CHR person is a member) but only display the status picker and the comment box to them.

[Henning Eggers (henninge)]

<sinzui> henninge: in security.py add
<sinzui> class ModeratePerson(ReviewByRegistryExpertsOrAdmins):
<sinzui> permission = 'launchpad.moderate'
<sinzui> usedfor = IPerson
<sinzui> then change EditAccount to
<sinzui> class EditAccount(ModeratePerson):
<sinzui> henninge: I am mistaken I think. The user needs access to his account (to deactivate it) so the permission may need to remain launchpad.Edit
<henninge> sinzui: remain lp.Edit for EditAccount?
<henninge> ok, I'll put that in a bug.
<sinzui> henninge: I think so
<sinzui> henninge: I think the code needs to look like this: http://pastebin.ubuntu.com/338783/

[Ursula Junque (ursinha)]

This bug was mentioned in stable r10097 <http://bazaar.launchpad.net/~launchpad-pqm/launchpad/stable/revision/10097>

[Curtis Hovey (sinzui)]

I thought I marked this as QAed three weeks ago. I have used it ti suspend more than 1000 accounts. Sorry for not communicating that it works well.

[Henning Eggers (henninge)]

Yes, I heard about that. Great job! That's why I could blindly mark it 'qa-ok'. Although, I think I had even tested it on staging earlier.